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Abstract 



A 1 -dimensional generalization of the well known Logistic Map is proposed. The proposed 
family of maps is referred to as the B-Exponential Map. The dynamics of this map are 
analyzed and found to have interesting properties. In particular, the B-Exponential Map 
exhibits robust chaos for all real values of the parameter B > e~ 4 . 

We then propose a pseudo-random number generator based on the B-Exponential Map 
by chaotically hopping between different trajectories for different values of B. We call 
this BEACH (B-Exponential All-Chaotic Map Hopping) pseudo-random number generator. 
BEACH successfully passes stringent statistical randomness tests such as ENT, NIST and 
Diehard. An implementation of BEACH is also outlined. 
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1 Introduction 

A function which has the same domain space and range space will be called a map. A 
chaotic map x n+ \ = F(x n ) is typically a non-linear discrete dynamical iteration equation, 
which exhibits some sort of chaotic behavior. Chaos is characterized by deterministic 
nonlinearity, non-periodicity, sensitive dependence on initial conditions, boundedness and 
topological transitivity pQ. One of the well known 1-dimensional iterative maps which 
exhibits chaotic properties is the Logistic Map pQ. The Logistic Family is defined by the 
iteration ). The parameter a controls the dynamics of this map. The 

map attains full chaos at a = 4 since it becomes surjective at this value. Henceforth, we 
shall refer to the map x n+ i = 4x n (l — x n ) as the Logistic Map. The Logistic Map was first 
proposed as a demographical model and was later applied to study population dynamics 
of species considering the twin effects of reproduction and starvation. The parameter a is 
a positive number and represents a combined rate for reproduction and starvation. 

In this report, we propose a generalization of the Logistic Map. The generalized family 
of maps is referred to as the B-Exponential Map. Characteristics of the B- Exponential Map 
such as return maps, bifurcation diagram, Lyapunov exponents, Schwarzian derivatives are 
investigated. The investigations reveal interesting properties, in particular we show that 
the B- Exponential Map exhibits robust chaos for a large range of B. 

One of the interesting features of Chaotic systems from an application point of view 
is that they statistically mimic random white noise while remaining deterministic. This 
property along with others (such as topological transtivity and Ergodicity, robust chaos) 
provide the necessary requirements for Chaotic systems to design strong pseudo-random 
number generators (PRNG). The B- Exponential Map, exhibits these properties (as we 
shall soon show) and hence can be utilized to build a PRNG. An implementation of the 
B- Exponential Map PRNG is outlined. 

2 The B-Exponential Map 

The B-Exponential Map GL(B,x) is defined as follows. 

GL(B,x) = - — — l V 0< x < 1 and 5 e K+. (1) 

B-sfB 

Here, B is the adjustable parameter. Note that x n+ \ = GL(B, x n ) is the iteration function. 
A plot of GL(B,x) is shown in Figures ^ and 121 for different values of B. GL(B,x) is 
unimodal for e -4 < B < oo. 

Consider the interval [0,1]. GL(B,x) is a linear combination of f(x) = xB x and 
/(l — x) = (1 — x)B 1 ~ x which are both single-hump maps for all B. The critical point of 
f(x) is j^pjj and that of /(l — x) is 1 + j^y- If B > 1, these are negative and greater 
than one respectively. Hence, we know that GL(B,x) is unimodal for B > 1. For B < 1, 
these two critical points lie within [0, 1] on either sides of x = 0.5. Consider < B < e -4 . 
We show in Appendix A that in this case, we lose surjectivity, x = 0.5 is a local minimum 
and hence GL(B,x) is no longer unimodal. For all B > e -4 , we know that x = 0.5 is a 
local maximum (at B = e" 4 , it is a point of inflexion). We know that GL(B,0) = and 
GL(B, 0.5) = 1. Assume that there is a critical point in [0, 0.5) and it is a local maximum. 
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In such a case, there has to be another critical point in [0,0.5]. This would mean that 
GL(B,x) will have at least 5 critical points in [0, 1] owing to symmetry around x = 0.5. 
Hence, GL(B,x) is unimodal for B > e -4 . 

In this section, we explain some results concerning the B-Exponential Map. 




l l l I l l l I I l 5 
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Figure 1: The B-exponential map for various values of B. The blue curves are are the 
maps for B < 1, and the red ones for B > 1, the black curve is the logistic map. All the 
curves are for B > e -4 . 
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Figure 2: The B-exponential map for various values of positive B < e 
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The B-Exponential Map is a generalization of the Logistic Map because of the following 
property: 

UmGL(5,a!)=4j;(l-i). (2) 

This interesting property can be derived by applying L'Hospital's rule. The derivation is 
given in Appendix A. 

The B-exponential map is concave for a wide range of B. We state and prove the 
following properties. 

Theorem 1 The B '-Exponential Map is topologically conjugate to the Logistic Map for 
e" 4 < B < oo. 

Proof: There is only one critical point for GL(B, x) at x — 0.5 for e -4 < B < oo. We can 
define a diffeomorphism of GL(B,x) to the line 2x (standard Tent-map) for < x < 0.5 
by associating the appropriate heights. Similarly, we can define another diffeomorphism to 
the line 2 — 2x for 0.5 < x < 1. This establishes that GL(B,x) is topologically conjugate 
to the standard Tent-map which we know to be topological conjugate to the Logistic Map. 
Thus, by transitive relation of topological conjugacy, we know that GL(B,x) is topologi- 
cally conjugate to the Logistic Map (e~ 4 < B < oo). 

The Lyapunov exponents of the B-Exponential map appears to be constant for all 
B > e -4 and equal to In 2. The Lyapunov exponents are defined as follows 0: 

* B )=^jt\\iGL(B, x) \ J (3) 

t=0 

It is a difficult task to evaluate the above expression analytically. We resort to numerical es- 
timation of the Lyapunov exponent. The plot of Lyapunov exponents of the B-Exponential 
Map is shown in Figure As it can been seen, the Lyapunov exponent is ln2 for B > e~ 4 . 
The number of iterations we used for computing the exponent is 10,000. 

Theorem 2 The B-Exponential Map is chaotic for all real B > e -4 . 

Proof: There is no universal definition of Chaos. We use the following conditions as 
necessary and sufficient for Chaos: 

• Determinism: GL(B,x) is a deterministic map of [0, 1] — > [0, 1] for B > e -4 . 

• Surjective and Boundedness: GL(B,x) is bounded for all < x < 1. GL(B,x) is 
surjective on [0, 1] for B > e -4 (see Appendix A). 

• Sensitive dependence on initial conditions: GL(B,x) exhibits sensitive dependence 
on initial conditions (continuously). This is characterized by positive Lyapunov ex- 
ponents. GL(B, x) seems to have a Lyapunov exponent of ln2=0.6931 (almost every- 
where) for every B > e~ 4 (refer to Figure |7|). 

• Positive Topological Entropy: The symbolic dynamics of GL(B,x) is such that all 
possible transitions (0 to 0, to 1, 1 to and 1 to 1) are achieved. Here the Markov 
partitions are (if < x < 0.5) and 1 (if 0.5 < x < 1). Hence topological entropy is 
ln2 which is positive. 



3 



B- Exponential Map 



• Topological transitivity: Successive iterations of GL(B,x) mixes the domain. For 
every pair of open sets A, B C [0, 1], there is a k > such that T^ k \A) n B ^ 0. 

• Periodic points are dense in [0, 1]: This follows by the fact that GL(B, x) is topological 
conjugate to the Logistic Map. 

2.1 Robust Chaos 

Robust Chaos is defined by the absence of periodic windows and coexisting attractors in 
some neighborhood of the parameter space Barreto [2] had conjectured that robust 
chaos may not be possible in smooth unimodal one-dimensional maps. This was shown to 
be false with counter-examples by Andrecut [I] and Banerjee [B]. Banerjee demonstrates 
the use of robust chaos in a practical example in electrical engineering. Andrecut provides 
a general procedure for generating robust chaos in smooth unimodal maps. 

As observed by Andrecut [3], robust chaos implies a kind of ergodicity or good mixing 
properties of the map. This makes it very beneficial for cryptographic purposes. The ab- 
sence of windows would mean that the these maps can be used in hardware implementation 
as there would be no fragility of chaos with noise induced variation of the parameters. We 
shall demonstrate that the B-Exponential Map exhibits robust chaos and this property 
makes it highly beneficial for generating pseudo-random number generators. 

Theorem 3 The B-Exponential Map exhibits robust chaos B > e -4 . 

Proof: We know that GL(B > e~ 4 ,x) has only one critical point at x = 1/2. We 
numerically find that the Schwarzian derivative which is given by 

f'"(r) 3/f"fr)\2 
S(f)(x) = j£f- 2 (7^) whenever f'(x) * 0. (4) 

is negative (Figures 01 and EJ). Since GL(B,x) is smooth and unimodal in the range 
[e _4 ,oo], we invoke the theorem in pQ to say that there can be at most one attracting 
periodic orbit with the critical point in its basin of attraction. Since x = 0.5 is the only 
critical point and it ends in the value after two iterates, we end up on an unstable fixed 
point (one can verify that \GL'(B,0)\ > 1). Hence, we infer that GL(B,x) does not have 
any attracting periodic orbits for B in [e -4 , 00]. 

It is interesting to observe that one can derive a generalization of the standard Tent 
Map by noting that there is a conjugacy between the Tent Map and Logistic Map. The 
Generalized Tent Map is described in Appendix A. By means of topological conjugacy, one 
could potentially generate a number of maps, all of which exhibit robust chaos. These could 
also be used for designing PRNG, but we shall restrict our attention to the B-Exponential 
Map in this report. 

The bifurcation diagram of the B-Exponential Map is shown in Figures El and El It is 
clear from the bifurcation diagram that the map is chaotic for a large range of B. This 
property is very interesting. This is a unique continuous map in that respect. There is full 
chaos, with surjective mapping, for an infinite range of B. A property such as this can be 
very useful in generating pseudo-random numbers. We explore this application in Section 

El 

Another interesting property of the B-exponential Map tends to a constant function 
(with value 1) as B tends to 00, for all x. 
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Figure 4: Schwarzian derivative of GL(B,x) for B = 1000. It can be observed that the 
value is always negative. 
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Figure 5: The bifurcation diagram of the B-exponential map for B ranging from near to 
10000. The transition to chaos at e -4 is not visible because of the large range of B. 
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Figure 6: The bifurcation diagram of the B-exponential map for B ranging from close to 
to 0.1. The breakdown of chaos is clearly visible at e~ 4 , i.e about 0.018316. 
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2.2 The Numerator Term 

The numerator term of the B-exponential map, G(B,x) = B — xB x — (1 — x)B 1 ~ x has 
interesting properties. It becomes topologically conjugate to the logistic map at B = <fi 2 
where <fi is the golden mean (<p = 1+ 2 V ^ ). Thus, it becomes fully chaotic at B = <p 2 . The 
bifurcation diagram of the numerator term is shown in Figure |H] Figure |H1 shows the period 
doubling route to chaos of the numerator term. 
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Figure 7: A plot of the Lyapunov exponents of the B-exponential map against the parameter 
B. 
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Figure 8: Bifurcation diagram of the numerator term G{x). The end of chaos can be seen 
at B = (p 2 w 2.6180. 
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Figure 9: A blown up version of the bifurcation diagram of the numerator term G(x). 
Full-chaos is achieved at B = (ft 2 « 2.6180 

3 A Pseudo-random Number Generator based on the 
B-Exponential Map 

A random number is a number chosen as if by chance from some specified distribution 
such that selection of a large set of these numbers reproduces the underlying distribution 
|14j . An ideal random number generator is a discrete memoryless information source that 
generates equiprobable symbols. In this report, the phrase random numbers refers to 
uniformly distributed random numbers. Pseudo-random number generators are algorithms 
implemented on digital systems that can generate sequence of numbers which are random- 
like in their statistical properties. Due to limitations in computation and precision, pseudo- 
random number sequences are necessarily periodic. Sequences generated by pseudo-random 
number generator algorithms are expected to have large periods and pass a number of 
statistical randomness tests. 

Chaotic dynamical systems exhibit unpredictability, ergodicity and mixing properties. 
This suggests that chaotic maps can be used in generating random numbers. The rela- 
tionship between chaos and cryptography have been discussed by Kocarev [Zj. Various 
one-dimensional chaotic maps have been proposed for generating random numbers, e.g: 
PL1D |9,, LOGMAP jH],etc. In their study of the Logistic Map as a random number gen- 
erator, Pathak and Rao |Sj propose the logistic map as a pseudo-random number generator 
which has a period of about 10 8 when implemented in double precision. This period is quite 
small when compared to many other 'good' random number generators in the literature. 
They conjecture that such a period is due to the fact that the value of a in y = ax(l — x) 
becomes slightly less than 4 (which corresponds to full chaos), because of which the map 
goes into periods. The fact that full chaos exists only for a small set of parameters is a 
major hindrance in using chaotic maps as pseudo-random number generators. The limit a- 
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tions of computation and precision cause the parameters to deviate from full chaos values 
and this result in periodicity. Another major disadvantage of using chaotic maps directly is 
that the the successive points are strongly correlated. This shows up in the 2-dimensional 
phase space which will be the plot of the mapping function. 

To overcome some of the problems mentioned above, one of the strategies might be to 
take iterates from different maps and use them as a sequence of random numbers. As shown 
in Theorem El the B-exponential Map shows full chaos for all values of B greater than e~ 4 . 
This provides us with a theoretically infinite number of maps to choose from. We hop from 
map to map, picking iterates on each hop to generate random numbers. Figure El shows 
the 10th return maps for a large number of B's > e~ 4 . It can be seen that the maps almost 
fill the space even with just ten iterates. This gives evidence that an algorithm based 
on map hopping on B has the potential to yield a uniformly distributed set of numbers 
between and 1. 




0.1 0.2 M 0.4 0.5 0.6 0.7 0.9 0.9 1 

x 



Figure 10: The tenth return map for various values of B > e 



3.1 BEACH 

We propose a PRNG based on B-Exponential Map with the name BEACH (B-Exponential 
All-Chaotic map-Hopping). As the name suggests, the pseudo-random number generator 
is based on the principle of hopping from map to map to extract numbers for the generator. 
Such a scheme has been studied by Rowlands ^2] and Zhang ^H] • Their methods were lim- 
ited by the choice of maps and the kind of hopping mechanism. MMOHOCC of Zhang ^3] 
uses a finite number of arbitrarily predefined chaotic maps. They use pre-defined hopping 
patterns to extract points from the trajectories. We propose a different hopping mecha- 
nism, one that is deterministically chaotic. We also have the advantage of choosing from 
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a very large number of fully developed chaotic maps. Zhang's MMOHOCC also has the 
problem of not having robust chaos for any of their maps. The maps they use (Chebyshev 
and Logistic) are not full-chaos for all values of the parameter. They use the fully chaotic 
value of a = 4 for the Logistic Map. However, such a method would have the draw-back 
of not being fully chaotic when implemented in hardware. It is impossible to maintain a 
constant value for a parameter exactly in hardware owing to noise. Another problem they 
have to worry about is the presence of periodic orbits for some values of the parameters 
even in the chaotic regime (this is indicated by the windows in the bifurcation diagrams). 
Our method eliminates all these problems. 

We showed in Theorem 4 that B-exponential Map exhibits robust chaos for all values 
of B > e -4 . In other words, for no value of B > e~ 4 does the B-exponential map settle 
into periodic orbits (except for a measure zero set of initial conditions). The BEACH uses 
this property to parametrically generate many maps exhibiting full chaos. In the following 
section, we discuss the BEACH algorithm. 

3.2 The Algorithm 

The seed to the BEACH pseudo-random number generating algorithm is any number be- 
tween and 1. This number forms the initial value of the iteration. Let xq denote the seed. 
We assume that the seed itself is generated using a random procedure like the movement of 
the mouse, the speed of typing on the keyboard or some physical characteristic (like heat 
dissipation) in the hardware. In BEACH, each random number is picked from a particular 
map. The maps are generated parametrically using a sequence of B's, {Bi, B 2 , B M } 
where M is the number of maps we wish to use for hopping. In our implementation, we 
pick one iterate from each of the maps. Thus M becomes equal to the length of the pseudo- 
random number sequence we intend to generate (however the Bs are not necessarily distinct 
though there are a potentially infinite number of them). Let x n denote the n th iterate of 
the map corresponding to B — B m . Since BEACH takes one value from each iterate, the 
sequence of random numbers will be {xi, x 2 , x$, ....,x m }. 
Let, 

f(B m , x n ) = Bm XnB _ ( * nJ " (5) 

Where B m is the m th value of the sequence {Bi, B 2 , Bm}- This sequence of -B's can be 
generated in many ways. We only need to ensure that successive -B's are not sufficiently 
close with a high frequency so that any two consecutive maps differ considerably. One 
way of varying B is by using the Logistic Map. Alternatively, B can also be varied using 
a simple, weak PRNG like Linear Congruential Generator. Such a scheme ensures that 
successive B's are not close to each other on the real line for most of the times. We could 
also vary B using the orbit of BEACH itself. We use the Logistic Map for generating B's, 
with slight modifications for effective implementation. We explain the modifications in the 
subsequent sections. Although varying B according to the logistic map does not give a 
random sequence of B's, it is sufficient for the purpose of hopping maps. The logistic map 
is periodic because of limitations in precision. But this does not bring about periodicity 
in the pseudo-random number sequence because for each of the B's, the previous iterate is 
different . 
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For a particular B m , f(B m ,x m -i) is iterated on x m _i, keeping B m constant. R such 
iterations make sure that x m is considerably different from x m _i, especially for x m 's close 
to the fixed points of the B m map. Now, the R th iterate is extracted as the new random 
number x m . The same is repeated for a new, updated value of B, B m+ x, i.e f(B m+ x,x m ) is 
iterated on x m , R times, with B m+ i remaining constant, and the R th iterate will be x m+ \ 
and so on. R is chosen such that there is a good trade-off between time of computation and 
departure from previous iterate. A value of R = 20 should be sufficient to ensure good a 
departure from x m -\ even when x m _i is close to the fixed point of B m . The pseudo-code of 
BEACH is given below. We limit the value of B because for large values of B, as seen from 
Figure ^ the maps become flat in shape. This may result in periodicity or fixed points 
owing to limitations of precision on a computer (values very near to 1 may be rounded off 
to 1 which becomes in the next iterate). 

x old = SEED; 
y old = SEED; 
for_l(i=l;z < LEN /32;i++) 

Vnew = % id(l - yold)] 
Void Vnew j 

for_2(j=l;j < R;j++) 

„ B-x old B*oid-{l-x old )B l -*oid _ 

Xnew B-VB ' 

■^old -^newi 

■Knewint ■Knew X 2 , 

end_for_2 

if-l(2/new — BLIMIt) ^ 

iiJ2{x new > bum it) 

Vnew -^new j 

else 

Vnew = BLIMIT ' 

end_if_2 
end_if_l 
end_for_l 



The SEED is the initial random seed input to the program. In this particular imple- 
mentation, SEED cannot be initialized to 0.75 since this is a fixed point of the Logistic 
Map. The other disallowed seeds are and 1 for obvious reasons. LEN is the number of 
bits which we wish to generate using the PRNG. BLIMIT refers to the maximum value 
of B allowed. 

3.3 Period of BEACH 

It is very hard to analytically determine the period of BEACH. Theoretically, robust chaos 
implies that there are no stable periodic orbits and we also know that the measure of 
periodic orbits is zero (in full chaos). However, when implemented on a computer, all 
orbits are periodic owing to limited precision. Since we have implemented BEACH in double 
precision arithmetic, the number of chaotic maps available for hopping is around 10 300 . As 
we are hopping in a chaotic fashion, consecutive maps from which random numbers are 
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extracted will be considerably different. Given this, we believe that the period of BEACH 
will be at least 10 300 . 

4 Implementation 

The implementation of the algorithm was written in ANSI C in double precision. Theoreti- 
cally, a chaotic iteration may visit any point in the interval (0, 1). This poses some problems 
in practical implementations. If an iterate goes very close to zero, less than the precision, 
it will be truncated to zero. We use a zero-trap to prevent such a thing from happening. 
The zero-trap traps values which are very close to zero and replaces them with arbitrary 
iterates of the Logistic Map. These are the same iterates which are used to generate B. 

As stated earlier, B is generated using the Logistic Map recursion. The initial value for 
the recursion on B is set equal to the seed of the generator. The B-Exponential Map is 
quite flat for large values of B, as shown in Figure It is desirable to limit the value of B 
for generating pseudo-random numbers. We choose the upper limit of B as 10, 000. Hence, 
B is extracted 10, 000 times from the iterate of the Logistic Map with the seed as the initial 
value. If an iterate is lesser than 10~ 4 , it is replaced by an iterate of the B-Exponential 
Map. If the iterate of B-Exponential Map is less than 10~ 4 , the Logistic Map iterate is set 
to 10" 4 . Thus, we ensure that B does not exceed 10, 000. The B-exponential map iteration 
gives a value between and 1, in double precision in our implementation. To convert this 
to integers, we multiply the iterate by 2 52 (similar to Zhang's method). 

The 2-dimensional phase space of 3,000 random numbers generated using BEACH is 
shown in Figure [TT] (i.e. x n vs. x n+ i). The 3-dimensional phase space (i.e. x n vs. x n+ i vs. 
Xn+2) is shown in Figure It can be seen from the 2-dimensional phase space that the 
numbers seem to randomly fill the entire area between and 2 32 and the 2 32 by 2 32 by 2 32 
cube in the 3-dimensional phase space. This seems to provide a strong evidence that the 
pseudo-random numbers are not correlated in either 2 or 3-dimensions. Weak generators 
like the linear congruential generator, distinctly settle in patterns in the 3-dimensional 
phase space. 

5 Randomness Evaluation of BEACH pseudo-random 
number generator 

The BEACH pseudo-random number generator was tested using 3 standard tests- The 
National Institute of Standards in Technology's Statistical Test Suite (NIST) [13 EE], 
George Marsaglia's Diehard Battery of tests and the ENT test [H|. The BEACH 
pseudo-random number generator successfully passed all the 15 tests of NIST and all the 
18 tests of Diehard Battery. 

5.1 Entropy, Chi-square and Mean 

Entropy (Shannon entropy) is defined as H(X) = ~^2 x P{x)log 2 P(x), where P(x) is the 
probability that the random variable X is in the state x. Thus, entropy is a measure of the 
information density of the data. We created a binary file with the random numbers (taken 
as 32 bit integers). Thus, the entropy of such a file would be defined based on the states 
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Figure 11: The 2-dimensional phase space of a sequence of 3000 integers generated usin^ 
BEACH. 



and 1. An optimal compression of the file using the ENT Pseudo-random Number Sequence 
Test Program (by John Walker) jT2j, resulted in an entropy of 1 per symbol. Thus, the 
program was unable to compress the file. This gives strong evidence that BEACH is a good 
pseudo-random number generator. This is supported by the fact that the file also passed 
the Lempel-Ziv Compression test which is a part of the NIST Statistical Testing Suite. 

The chi-square test is a very basic test of randomness. Knuth jO] gives a detailed treat- 
ment of the chi-square test. The chi-square distribution is for a sequence file and expressed 
as an absolute number and a percentage which indicates how frequently a truly random se- 
quence would exceed the value calculated. This percentage is a measure of the randomness. 
If the percentage is less than 1% or greater than 99%, then the sequence is not random. Per- 
centages between 90% and 95% and 5% and 10% indicate the sequence is "almost suspect" 
Sequences generated by BEACH were within 25% to 75% consistently. 

The mean of 1 billion bit sequences was consistently at 0.5 for 1 bit word length and 
127.5 for 8 bit word length. The serial correlation was also very low, of the order of 10~ 5 
for a billion bit sequence. In addition to this, ENT program carried out Monte Carlo Value 
of Pi test. Each successive sequence of 24 bits are used as X and Y co-ordinates within 
a square. If the distance of the randomly-generated point is less than the radius of the 
circle inscribed within the square, the 24-bit sequence is considered a hit The percentage 
of hits is used to calculate the value of ir. For very large streams (this approximation 
converges very slowly), the value will approach the correct value of ir if the sequence is 
close to random. For BEACH, the error percentage was almost 0.00%, consistently. For 



13 



B- Exponential Map 



'Phase_Space_3D.dat' u 1 :2:3 
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4e+009 - 
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1.5e+009 - 




Figure 12: The 3-dimensional phase space of a sequence of 3000 integers generated using 
BEACH. 
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Length 


Entropy 


Chi-square 


Arithmetic 


Monte Carlo 


Serial 




(per bit) 


distribution (%) 


mean 


value of Ti (error %) 


correlation coeff 


100 Mb 


1.000000 


50.00 


0.5000 


0.01 


0.000151 


500 Mb 


1.000000 


50.00 


0.5000 


0.00 


0.000024 


1 Gb 


1.000000 


75.00 


0.5000 


0.01 


0.000035 



Table 1: Results of ENT on 3 bitstreams. 



the complete ENT test results, visit http://mahesh.shastry.googlepages.com/beach. The 
following table gives the value of these parameters for different lengths of random bits. 



5.2 NIST Statistical Test Suite 

BEACH random numbers also passed the NIST Statistical Test Suite ^3] . The input was 
given as an ASCII file consisting of l's and 0's. The pseudo-random number sequence 
passed all the 15 tests of the NIST Suite. NIST checked the uniformity of p-values of 1000 
streams of 1 million bits each and returns a p-value of the p-values. The p-values of all the 
15 tests for each of the 1000 streams were greater than 0.01 which is the limit for passing 
a test. It was found that the p-values of p-values were all higher than 0.001. This meant 
that the p-values are all uniform. Passing of a test in NIST Suite implies a confidence 
level of 99%. In other words, when the p-value is more than the passing level, the test is 
considered passed with a confidence level of 99%. The details of all the 15 the tests and 
their interpretation is given in ^B|- The histogram of p-values for the Block Frequency 
Test are given in Figure ED A plot of the proportion of bit-streams passing the NIST tests 
is given in Figure El with the 2 thick lines indicating the passing values. 

140 | 1 1 1 1 1 1 1 1 1 1 




0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9 



Figure 13: The histogram of p-values of the block-frequency test of NIST Suite. It indicates 
that the p-values are uniform. 
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5.3 Diehard Battery of Tests 

The Diehard Battery of Tests of George Marsaglia are collectively considered to be one of 
the most stringent tests for randomness. Ten streams of 1 billion bits each were generated 
using ten different random seeds. Each of the seed was chosen randomly from 10 equally 
spaced intervals of (0,1). The criteria for passing a Diehard test is that the p- value should 
not be or 1 up to 6 decimal places. BEACH passed all the 18 tests recommended in the 
Diehard Battery. The test results are tabulated in the table below. 
The full results, for all the seeds, of the Diehard Tests are available at 
http : / / mahesh. shastry. googlepages. com /beach 

A very few of the results were close to 0.9999. For those seeds, longer sequences were 
tested. The results of the Diehard Tests for longer sequences showed that such p-values 
close to 1.00000 were one-off occurrences. We have found that BEACH passes all the tests 
of Diehard and NIST for extremely large sequences (up to 10 Gb). 

6 Summary and Future Research Directions 

We have for the first time explored the utility of robust chaos for the generation of pseudo- 
random numbers. By chaotically hopping across maps which are fully chaotic, BEACH 
appears to be a strong candidate for pseudo-random number generators for cryptographic 
purposes with very long periods. The fact that BEACH successfully passes stringent statis- 
tical tests even for extremely long sequences is a testimony to this statement. The existence 
of one of the following, a secure pseudo-random number generator, a secure block encryp- 
tion algorithm, and a secure one-way function, implies that the other two also exist [Zj. 

1.03 I , 1 , 1 1 , , 1 1 1 

1 .02 - - 

a 1.01 - : 

B 



S o.99- .... • ;" ' .' ■ •'.;„'.' ■'. ".. • _ '.. 

to . ; . ' ' ; " . . ' . ; . *".... " 

15 . . * • " 

° 0.98 =-- : : : : —- : : : : : : : : : : : : : : : : : = 

o ..... ... 

o 

Q_ ..... ... 

o ..... ... 

o- 0.97 - 

0.96 

I i i i i i i i i i 

20 40 60 80 100 120 140 160 180 

Tests 

Figure 14: The proportion of templates passing the test. The black lines indicate the 
threshold for the passing value. The threshold for passing is given approximately by a ± 
3y/a(l — a)/M here, a = 0.01 is the passing value. M is the number of bitstreams. 
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Test 
No. 


Seed 
1 


Seed 
2 


Seed 
3 


Seed 
4 


Seed 
5 


Seed 
6 


Seed 
7 


Seed 
8 


Seed 
9 


Seed 
10 


1 


.871 


.221 


.250 


.922 


.014 


.154 


.069 


.050 


.790 


.515 


2 


.971 


.527 


.701 


.273 


.448 


.946 


.292 


.460 


.902 


.113 


3 


.761 


.942 


.321 


.679 


.407 


.585 


.519 


.587 


.448 


.962 


4 


.374 


.801 


.193 


.098 


.799 


.117 


.651 


.437 


.105 


.015 


5 


.419 


.665 


.317 


.324 


.040 


.876 


.678 


.507 


.468 


.075 


6 


.925 


.199 


.869 


.401 


.978 


.998 


.427 


.930 


.901 


.268 


7 


.005 


.192 


.935 


.611 


.505 


.621 


.729 


.339 


.125 


.773 


8 


.516 


.549 


.634 


.539 


.092 


.483 


.842 


.053 


.171 


.576 


9 


.445 


.542 


.080 


.964 


.724 


.773 


.807 


.136 


.383 


.806 


10 


.244 


.084 


.982 


.779 


.355 


.088 


.678 


.324 


.185 


.059 


11 


.717 


.440 


.045 


.269 


.280 


.376 


.542 


.873 


.589 


.952 


12 


.566 


.702 


.008 


C\C\C\ 

.900 


1 A £ 

.145 


.065 


.427 


TO A 

.784 


.292 


.065 


13 


.544 


.636 


.096 


.376 


.768 


.922 


.324 


.903 


.987 


.677 


14 


.804 


.835 


.845 


.302 


.390 


.791 


.235 


.567 


.802 


.746 


15 


.082 


.512 


.523 


.875 


.713 


.604 


.704 


.909 


.482 


.119 



Table 2: Results of Diehard battery of tests on 10 bitstreams of 1 Gb each. The names of 
the tests are given in Appendix B. 

This makes a strong case for the search of strong pseudo-random number generators and 
we believe that robust chaos will have an important role to play. Our future research would 
focus on developing a strong stream cipher based on BEACH. To this end, we wish to 
perform security analysis on BEACH. 

Acknowledgements 

We would like to thank Sutirth Dey of the Jawaharlal Nehru Centre for Advanced Scientific 
Research for stimulating discussions on the B-Exponential Map. Nithin Nagaraj would 
like to express his sincere gratitude to the Department of Science and Technology Ph.D. 
fellowship program and to Timothy Poston, National Institute of Advanced Studies for 
discussions on topological conjugacy. 

References 

[1] K T Alligood, J A Yorke, T D Sauer: Chaos: An Introduction to Dynamical Systems; 
Springer- Verlag Inc., 1997 

[2] E Barreto, B R Hunt, C Grebogi, J A Yorke: From High Dimensional Chaos to Stable 
Periodic Orbits: The Structure of Parameter Space, Physics Review Letters, VOL. 78, 
NO. 24, June 1997 

[3] S Banerjee, J A Yorke, C Grebogi: Robust Chaos, Physics Review Letters, VOL. 80, 
NO. 14, April 1998 



17 



B- Exponential Map 



[4] M Andrecut, M K Ali: Robust chaos in smooth unimodal maps, Physical Review E, 
VOL. 64, No. 025203, July 2001 

[5] M Andrecut, M K Ali: Example of robust chaos in a smooth map, Europhyics Letters, 
VOL. 54 NO. 3, May 2001 

[6] D Knuth: The Art of Computer Programming, Volume 2: Seminumerical Algorithms, 
Third Edition; (Reading, Massachusetts: Addison- Wesley, 1997), xiv+762pp. ISBN 
0-201-89684-2 

[7] L Kocarev: Chaos Based Cryptography: A Brief Overview, Circuits and Systems Mag- 
azine; IEEE, 2001 

[8] S C Pathak, S Suresh Rao: Logistic Map, A possible random number generator; Physical 
Review E, VOL. 51, NO. 4, April 1995 

[9] T Stojanovski, L Kocarev: Chaos-Based Random Number GeneratorsPart I: Analysis; 
IEEE Transactions on Circuits and Systems-I: Fundamental Theory and Applications, 
VOL. 48, NO. 3, March 2001 

[10] L Kocarev, G Jakimoski: Pseudorandom Bits Generated By Chaotic Maps; IEEE 
Transactions on Circuits and Systems-I: Fundamental Theory and Applications , VOL. 
50, NO. 1, January 2003 

[11] I Vattulainen, K Kankaala, J Saarinen, and T Ala-Nissila: A Comparitive Study of 
Some Pseudorandom Number Generators; |arXiv:hep-l at / 9304008 v2 10 Aug 1993 

[12] T Rowlands, D Rowlands: A More Resilient Approach to Chaotic Encryption, 
ICITA2002 

[13] X Zhang, L Shu, K Tang: Multi-Map Orbit Hopping Chaotic Stream Cipher; 
|http://www.arxiv.org/f"tp/ cs/papers/0601/0601010. pdf| 

[14] W E Weisstein: "Random Number", From MathWorld-A Wolfram Web Resource, 
http: / /mathworld. wolfram.com/RandomNumber. html 

[15] National Institute of Standards and Technology, Random Number Generation and 



Testing; http:/ /csrc. nist.gov/rng 



[16] A Rukhin et. al.\ A Statistical Test Suite for Random and Pseudorandom Number 
Generators for Cryptographic Applications; NIST Special Publication 800-22, with re- 
visions dated May 15, 2001 

[17] John Walker: ENT: A Pseudorandom Number Sequence Test Program; 
http:/ /www.fourmilab.ch/random/ 

[18] G Marsaglia: The Diehard Battery of Tests of Randomness, available online at: 



ht tp : / / www. csis . hku . hk~diehar d/ index, html 



18 



B- Exponential Map 



Appendix 

A Derivation of certain results 

A.l Derivation of generalization of the Logistic Map 

To prove that 

|mGL(5,i)=4a;(l-4 (6) 

i.e.; 

B - X B X - (1 - x)B 1 ~ x A . 
hm v _ ' = Axil - x). (7) 

B-i b-Vb 



Consider the LHS; by applying L'Hospital's rule; 

, B - xB x - (1 - x)B 1 ~ x , 1 - x 2 ^- 1 - (1 - x) 2 ^-^ 

lim v _ ; = lim v _ ; = 4x(l-x). 8 

B-i B-y/B b-i 1-1/2a/B 

A. 2 B-exponential map loses surjectivity at 1/e 4 

For surjectivity, the local maximum of the map in the interval x = (0, 1) should be equal 
to 1. Using this condition, we show that the map loses surjectivity for B < e -4 . The 
condition for extremum of GL(x) with respect to x is: 

«af ■*>=„. (9 ) 

OX 

Now, we know that the B-exponential map is symmetric and concave. Hence, x = 0.5 
should be a maximum or a minimum point. Thus, we get: 



dGL(B, x) 



dx 

i.e: 



= VBet + . (10) 

x=0.5 







B-xB x -(l-x)B 1 ~ x 
B-y/B 



dx 



= V5el + . (11) 

x=0.5 

But, when 0.5 is a local minimum in any interval, then GL(B, 0.5) = 1 will be a local 
minimum and the map will no longer be surjective. We use this condition to find B for 
which the map loses surjectivity. 

d 2 GL{B,x) 



dx 2 



> 0. (12) 

x=0.5 



Applying this, we get for B < e -4 , B-exponential map is not surjective. 

This also shows that the second derivative of the function with respect x, is negative 
for all values of x only when < B < e -4 . 
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A. 3 The B-exponential Map becomes constant at 1 as B tends 

to oo 



To find; 
rearranging the terms, we get; 



B-xB x -(l- x)B 1 ~ x 
lim 



B-VB 



1 - xB( x -V - (1 - x)B~ x 
lim — = 1. 

B^oo l-l/y/B 



(13) 



(14) 



Hence proved. 



A. 4 Generalized Tent Map 

We know that the Logistic Map is conjugate to the Tent Map £Q. We can use the explicit 
conjugacy map on GL(B,x) to obtain a generalization of the Tent Map. We know that 
the conjugate map C(x) is given by 0: 



C(x) 



'1 — COS Tlx) 



sin' 



/7TX\ 



The Generalized Tent Map is given by: 



s 2 , /B-sin 2 m )B sm a (¥) - (I -sin 2 Of ))B^~ sm 2 (¥))x| 
GT(B,x) = -sin' 1 ( ^ K —= 

7T V B-JB 



with the following property: 



lim GT(B.x) = 1- 2 

B-*l 



1 

X 

2 



(15) 



(16) 



(17) 



The Generalized Tent Map is plotted below for a few values of B. 




0.1 0.2 0.3 



Figure 15: The Generalized Tent Map for three values of B. Black: B = 2, Red: B = 200, 
Green: B = 2 x 10 10 . 

The Generalized Tent Map also exhibits robust chaos property (since it is topologically 
conjugate to the B- Exponential Map) and could also be used for generating PRNG. 
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B List of tests included in NIST and Diehard suites 
B.l NIST tests: 



1. Frequency 

2. Block- Frequency 

3. Cumulative-Sums 

4. Runs 

5. Longest- Run 

6. Rank 

7. FFT 

8. Nonperiodic-Templates 

9. Over lapping- Templates 

10. Universal 

11. Approximate Entropy 

12. Random- Excursions 

13. Random- Excursions- Variant 

14. Serial 

15. Linear-Complexity 

B.2 Diehard tests: 

1. Birthday Spacings Test 

2. Overlapping 5- Permutation Test 

3. Binary Rank Test For 31 x 31 Matrices and 32 x 32 Matrices 

4. Binary Rank Test For 6x8 Matrices 

5. Bitstream Test 



6. 



Tests OPSO, OQSO And DNA 



7. 



Count- The-l'S Test On A Stream Of Bytes 
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Count- The-l'S Test For Specific Bytes 



9. 



Parking Lot Test 
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10. Minimum Distance Test 

11. 3Dspheres Test 

12. Squeeze Test 

13. Overlapping Sums Test 

14. Runs Test 

15. Craps Test 
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